Name | Value | Description | Recommended |
---|---|---|---|
KMAC 128 | TBD4 | KMAC w/ SHA-3 128-bits | Yes |
KMAC 256 | TBD5 | KMAC w/ SHA-3 256-bits | Yes |
Name | Value | Key Size | Description | Recommended |
---|---|---|---|---|
A128KW-Pad | TBD1 | 128 | AES Key Wrap w/padding and a 128-bit key | Yes |
A192KW-Pad | TBD2 | 192 | AES Key Wrap w/padding and a 192-bit key | No |
A256KW-Pad | TBD3 | 256 | AES Key Wrap w/padding and a 256-bit key | Yes |
Name | Label | Type | Algorithm | Description |
---|---|---|---|---|
salt | -20 | bstr | direct+KMAC-128-KDF, direct+KMAC-256-KDF, ECDH-ES+KMAC-128-KDF, ECDH-ES+KMAC-256-KDF, ECDH-SS+KMAC-128-KDF, ECDH-SS+KMAC-256-KDF ECDH-ES+KMAC-128-KDF+A128KW, ECDH-ES+KMAC-256-KDF+A128KW, ECDH-SS+KMAC-128-KDF+A128KW, ECDH-SS+KMAC-256-KDF+A128KW ECDH-ES+KMAC-256-KDF+A256KW, ECDH-ES+KMAC-256-KDF+A256KW, ECDH-SS+KMAC-256-KDF+A256KW, ECDH-SS+KMAC-256-KDF+A256KW | Random salt |
Name | Value | KDF | Description |
---|---|---|---|
direct+KMAC-128 | TBD6 | KMAC-128 | Shared secret w/ KMAC-128 |
direct+KMAC-256 | TBD7 | KMAC-256 | Shared secret w/ KMAC-128 |
Name | Value | KDF | Ephemeral- Static | Key Wrap | Description |
---|---|---|---|---|---|
ECDH-ES + KMAC-128 | TBD8 | KMAC-128 | yes | none | ECDH ES w/ KMAC - generate key directly |
ECDH-ES + KMAC-256 | TBD9 | KMAC-256 | yes | none | ECDH ES w/ KMAC - generate key directly |
Name | Value | KDF | Ephemeral- Static | Key Wrap | Description |
---|---|---|---|---|---|
ECDH-ES + KMAC-128 + A128KW | TBD10 | KMAC-128 | yes | A128KW | ECDH ES w/ KMAC-128 and AES Key Wrap w/ 128-bit key |
ECDH-ES + KMAC-256 + A256KW | TBD11 | KMAC-256 | yes | A256KW | ECDH ES w/ KMAC-256 and AES Key Wrap w/ 256-bit key |
ECDH-SS + KMAC-128 + A128KW | TBD12 | KMAC-128 | yes | A128KW | ECDH SS w/ KMAC-128 and AES Key Wrap w/ 128-bit key |
ECDH-SS + KMAC-256 + A256KW | TBD13 | KMAC-256 | yes | A256KW | ECDH SS w/ KMAC-256 and AES Key Wrap w/ 256-bit key |